Ukusethwa kabusha kwenethiwekhi ku-Windows kususa okungaphezu kwephutha le-VPN

Iseluleko sifika phakathi nemizuzu eyishumi ngemva kwesikhalo ngasinye se-VPN ku-Windows: gijimisa ukusethwa kabusha kwenethiwekhi, kulungisa konke. Akukwenzi, futhi akukona okuncane. Leyo nkinobho ihlanza ama-adaptha, ixhumanisa kabusha amaphrothokholi, isusa amakheli amile nemizila ezenzakalelayo, ilahla okufakiwe kwe-firewall nezihlungi, futhi ikhohlwa amaphrofayela e-Wi-Fi ngaphezu kwalokho. Kumshini onomhubhe osebenza kodwa ohlelwe kabi, iguqula iphutha elilodwa elingatholakala libe ukwakhiwa kabusha okungabhalwanga. Gcina izinto ezinhlanu kuqala, futhi ugcina ithuba lokukuhoxisa.

Ukusethwa kabusha akukhawulelwe kuphrofayela ye-VPN

Ukuxhumana kwe-VPN kuyinto eyodwa phakathi kweziningi ezabelana ngesitaki senethiwekhi. Ukususa nokwengeza kabusha i-adaptha kushintsha inkomba yesixhumi, futhi noma yini eyayibhekisela kuleyo nkomba, kusukela emzileni kuya kumthetho we-firewall kuya kusihambisi sezihlungi zenkampani yangaphandle, manje isibhekisela entweni engasekho.

I-virtualization yenza kubi nakakhulu. Ama-switch e-Hyper-V, amabhuloho e-VMware, amanethiwekhi ekhonteyina namaklayenti e-VPN anama-adaptha awo angokoqobo konke ahlala endaweni eyodwa. Ukusethwa kabusha okufaka kabusha isitaki esiyisisekelo kungashiya lezo zingxenye zikhona ngohhafu, futhi umshini ovelayo ubika ihadiwe esebenzayo ngaphandle komzila osebenzayo.

Akukho kulokho okuyimpikiswano emelene nokusethwa kabusha nanini. Kuyimpikiswano emelene nokusetha kabusha kuqala, kumshini ongawubhalanga, lapho iphutha langempela lingase libe ukufakiwe okukodwa komzila noma isihlungi esisodwa esidala. Ukusethwa kabusha kuyithuluzi elibanzi elinezinga elincane lokuphumelela, futhi ukulisebenzisa njengomnyakazo wokuqala kuqinisekisa ukuthi awusoze wazi ukuthi yikuphi kwalaba ababili obekuyikho.

Gcina ubufakazi ngaphambi kokugcina izilungiselelo

Ukwehluleka ngokwako kuyidatha. Bhala ikhodi yephutha enembile, isikhathi, iphrofayela ekhethiwe, nokuthi ingemuva lokuphuma lalibhalile yini umzamo. Ikhodi ethi umhubhe awukaze uthole impendulo nekhodi ethi ukuqinisekisa kwehlulekile zikhomba ekulungiseni okuhluke ngokuphelele. Ngemva kokusethwa kabusha kungenzeka ungakwazi ukuphinda kokubili. Thatha isimo esiphukile njengempahla osezokuyisebenzisa.

Thwebula isimo ngesikhathi sisaphukile, kufolda engaphandle kwezincwadi zesikhashana zomshini:

mkdir C:\vpn-evidence
ipconfig /all > C:\vpn-evidence\ipconfig.txt
route print > C:\vpn-evidence\routes.txt
Get-VpnConnection -AllUserConnection | Export-Csv C:\vpn-evidence\profiles.csv -NoTypeInformation
netsh wfp show state file=C:\vpn-evidence\wfp.xml

Umyalo wokugcina yiwona abantu abawushiyayo, futhi ngokuvamile yiwona ochaza iphutha. Izihlungi ezisele zeklayenti elisusiwe ziphila njengenqubomgomo ehlala njalo, futhi i-XML ethunyelwe iyirekhodi yendawo yodwa ngazo. Yifunde ngaphambi kokuba ukusethwa kabusha kususe into obuzama ukuyibona.

Gcina ukuhlelwa okungasoze kubuye

Ezinye izilungiselelo zenziwa kabusha ngokuzenzakalela. Amakheli amile, imizila yangokwezifiso, izijobelelo ze-DNS, ukukhishwa kwe-proxy nemithetho ye-firewall akwenziwanga kanjalo. Ngisho namaphrofayela ngokwawo awenziwanga kanjalo, awo ahlala kufayela lencwadi yocingo ukusethwa kabusha okungakubuyiseli kona.

Get-NetIPConfiguration | Out-File C:\vpn-evidence\netip.txt
Get-NetRoute -AddressFamily IPv4 | Export-Csv C:\vpn-evidence\netroutes.csv -NoTypeInformation
Get-DnsClientServerAddress | Export-Csv C:\vpn-evidence\dns.csv -NoTypeInformation
Get-ChildItem Cert:\LocalMachine\My | Select-Object Subject,Thumbprint,NotAfter

Uhlu lwezitifiketi lubaluleke ngaphezu kokubukeka kwalo. Izitifiketi zamaklayenti azichithwa ukusethwa kabusha kwenethiwekhi, kodwa uhlu lukutshela ukuthi iphrofayela lalincike kuziphi nokuthi kukhona yini oluphelelwa yisikhathi maduze. Ukuthola isitifiketi esiphelelwe yisikhathi ngemva kokwakhiwa kabusha kumosha ukwakhiwa kabusha.

Bhala indlela yokubuyisela ngaphambi kokuqala

Uma umshini ukude futhi i-VPN iyona ndlela kuphela yokungena, ukusethwa kabusha kungaqeda isikhathi sakho futhi kungenzeka kungabi nandlela yokubuya ngaphandle komuntu endaweni. Qinisekisa ukuthi ukufinyelela okungaphandle kwebhendi kukhona, noma ukuthi umuntu ukhona, ngaphambi kokugijimisa noma yini ethinta ama-adaptha.

Gcina izifaki nemininingwane yokuxhumana endaweni umshini ongakwazi ukuyifinyelela ngemuva kwalokho. Iklayenti okufanele lifakwe kabusha kusuka kuphothali yomthengisi efinyelelwa ngomhubhe iwukuncika okuyindilinga, futhi iyona ndlela evamile kakhulu yokuthi le nqubo ibe ukuphazamiseka kwesevisi.

Bese ubhala okwenzayo nokuthi kungani, kufaka nemiyalo enembile. Umuntu olandelayo udinga ukwazi ukuthi ukusethwa kabusha bekungukuhlola noma isinqumo, futhi “sizame konke” akusona isirekhodi.

Hlola ngezingqimba ngemva kokusethwa kabusha

Ukubuyisela okuningi ngasikhathi sinye kwenza umphumela ungafundeki. Sebenza kusuka phansi: i-adaptha nekheli, bese ukuxazululwa kwamagama, bese isigaba sobunikazi bomhubhe, bese uhlelo lokusebenza. Izingqimba ngayinye inomiyalo ephendula umbuzo wayo:

Get-NetAdapter | Where-Object Status -eq 'Up' | Select-Object Name,InterfaceDescription
Resolve-DnsName intranet.example.internal
Get-VpnConnection -Name 'Corp' | Select-Object ConnectionStatus,TunnelType
Test-NetConnection -ComputerName intranet.example.internal -Port 443

Uma ungqimba lwe-adaptha lunempilo futhi ukuxazululwa akunalo, ima futhi ulungise ukuxazululwa. Ukufaka kabusha iklayenti le-VPN kulelo phuzu kwengeza okuguqukayo futhi kususa umkhondo. Buyisela kuphela izilungiselelo ongazichaza, ngayinye ngayinye, uhlola ungqimba olufanayo ngemva kokunye ngakunye.

Umhlahlandlela ka-Microsoft wokuxazulula izinkinga wephutha 720, isibonelo, uhlukanisa izinkinga zokubopha kusuka ezinkingeni zokwabiwa kwamakheli esikhundleni sokunquma ukusethwa kabusha okujwayelekile, okuwumgomo olungile wakhodi ngamunye kulomkhakha. Funda okushiwo yikhodi ngaphambi kokufinyelela ithuluzi elibanzi kakhulu elitholakalayo.